Release notes

Always in motion.

The latest improvements, fixes, and additions to Zuse.

Unreleased

Added

  • Enable organization beta access for selected users and their teams, with automatic access for approved creators' members and optional access for existing teams.

Fixed

  • Restore reliable provider usage limits with CLI-backed Claude readings, isolated provider failures, automatic retries, accurate percentages, and visible stale readings.
  • Connect cloud workspaces to GitHub with repository-scoped user credentials so commits, pushes, and pull requests use the connected account.
  • Let idle cloud workspaces pause even when connected clients send RPC heartbeats, poll status, or receive subscription updates, while preserving activity from user actions and active agent turns.

0.22.1

Fixed

  • Keep Files, Terminal, and Git on the selected local chat's worktree while session details load, instead of opening the main checkout or another chat's workspace
  • Fix cloud file sync stalls with verified, compressed transfers that preserve unchanged and unrelated local files, recover after interruptions, and show scanning, receiving, applying, and error states. Preserve the original transfer error when cleanup cancels the remote snapshot process
  • Prevent newly created cloud chats from reusing branch names associated with historical pull requests while preserving explicitly selected branches
  • Preserve Boat's bundled coding agents instead of replacing them with older Zuse-pinned versions when building cloud workspace templates
  • Prevent premature cloud connection timeouts during attachment uploads by allowing cloud gateway connections up to 15 seconds to open

0.22.0

Added

  • Choose Stable or Preview updates in Settings. Preview builds receive early changes and newer Stable releases; switching back to Stable supports an in-place downgrade while retaining sessions and settings.
  • Run Pi and OpenCode 2 coding-agent sessions with model selection, attachments, provider authentication, permission requests, context compaction, and conversation recovery.
  • Choose Boat or E2B for cloud chats, including configurable Boat machine sizes, shared agent authentication, provider-specific usage reporting, and reliable resume and restore behavior.
  • Start cloud workspaces with attachments, context files, goals, and branches or pull requests from the origin repository. Cloud agents can also request approved commands on linked desktops.
  • Repair pull-request feedback, failing checks, and merge conflicts from editable composer context; enable CI Auto Fix to watch checks and send bounded, resumable repairs to the originating agent chat.
  • Manage stacked pull requests through gh-stack, publish draft layers, inspect compact status rows, and continue merged work on a fresh branch from origin/main.
  • Use a persistent bottom terminal alongside the right-side terminal, with independent tabs per chat, resizing, and consolidated connection, rename, clear, and restart controls.
  • Select Claude Opus 5.5, GPT-6 Sol, GPT-6 Luna, and Grok 4.7 where supported, with provider-specific reasoning options.
  • Personalize the desktop chat landing page with a device-local wallpaper, opacity controls, replacement, and removal.
  • Create images in Dither Studio with local uploads, dithering algorithms, palettes, adjustments, comparison previews, zoom, and PNG export.
  • Manage Cloud Workspaces API keys for public API integrations, and use native Slack account linking and cloud tasks where configured.

Changed

  • New chats remember the last project and each project's computer, cloud provider, and workspace. First-time local chats now default to an isolated worktree with clearer setup progress.
  • Desktop startup opens the window and project list earlier, with a single animated loader while repository details finish loading.
  • Desktop terminals now use Ghostty, with improved keyboard handling, compact-window sizing, and recovery across reconnects, restarts, and renderer reloads.
  • Assistant responses stream more smoothly, consecutive tool calls form compact collapsible activity trees, and collapsed tools preview their inputs while keeping errors visible.
  • Cloud conversations load recent messages first and fetch earlier history in the background. Cached model, project, and workspace catalogs reduce repeated loading.
  • Cloud messages and attachments remain queued until a paused runtime claims them, while launch and synchronization stages stay visible and cancellable where supported.
  • Cloud-to-local sync batches settled edits and applies incremental changes without rewriting unchanged files or stalling on generated-cache activity.
  • The desktop workspace now uses tighter spacing, consistent rounded panels, fewer dividers, matching terminal headers, transparent scrollbar tracks, and refreshed project and Quick Start surfaces.
  • GitHub pull-request views provide complete review feedback, direct CI links, file and line navigation, removable context, and compact stack status displays that remain usable during refreshes.
  • Mobile pairing, reconnect recovery, navigation, transcript loading, notifications, privacy controls, account cleanup, and App Store readiness have been strengthened.

Fixed

  • Prevented intermittent desktop loading stalls when the renderer connected before the RPC runtime was ready.
  • Kept newly added, scaffolded, and worktree projects selected, visible after restart, and consistently connected to the correct Git, terminal, files, attachments, and issue context.
  • Fixed New Chat and cloud launch races so earlier launches cannot steal focus, restore stale selections, clear newer drafts, or attach pull-request repair context to the wrong session.
  • Improved cloud workspace resume, readiness, reconnect, restoration, and branch recovery, including preserved runtimes, delayed readiness, conflicting local edits, and stale recovery loops.
  • Kept active cloud turns interruptible during reconnects and history synchronization, without transient reconnect notices ending turns prematurely.
  • CI Auto Fix watchers now remain attached to their original chat across navigation and host differences, wait for an idle agent, recheck synchronization and closure state, and preserve duplicate and attempt limits.
  • Pull-request repair excludes resolved, outdated, dismissed, and otherwise inactive feedback from counts and agent context.
  • Fixed terminal focus, interactive input, sizing, and recovery; chat titles now also persist reliably across restarts.
  • Fixed Files panel deletion crashes, failed cloud restore recovery, mobile initial transcript delivery, and pairing-code redemption.
  • Dither Studio preserves work after failed uploads or exports, supports export retries, and prevents stale output after rendering failures; opening the right sidebar no longer shifts the left sidebar.

0.21.0

Added

  • Find chats, application commands, settings, and workspace actions together with Cmd/Ctrl+K; use `>` to search commands only, or Cmd/Ctrl+P to search project and worktree files
  • Organize sidebar projects into named groups with colored folder icons, and drag projects or groups to reorder them
  • Choose the main checkout or a fresh isolated worktree directly from the composer when starting a chat
  • Select Fable 5.1 and GPT-6 Astra, now the defaults for Claude and Codex respectively
  • Access account cloud chats from mobile without an online desktop, read saved history while compute sleeps, and start chats in existing cloud projects; availability depends on compatible cloud services and workspace images

Changed

  • Model choices refresh from a cached online catalog and provider inventories, allowing catalog additions without a desktop update while retaining an offline fallback
  • The desktop interface has a bottom-docked composer, compact settings and authentication dialogs, and clearer project, computer, model, and reasoning controls
  • Service URLs appear as compact clickable links in the composer and user messages, with clearer skill references

Fixed

  • Eligible cloud text messages can be accepted while compute sleeps and survive reconnects and restarts, with explicit delivery outcomes and protection against duplicate sends
  • Offline composer queues resume after reconnecting, and recovered Cloud Workspaces reconnect their chat client instead of leaving a stale connection error
  • Cloud chats distinguish rejected Codex credentials from connection failures, and new workspaces preserve configured permission defaults
  • Cloud workspaces report missing runtime data while preserving cached transcripts, and malformed legacy resources no longer block recovery of unrelated workspaces
  • Cloud sandbox images preconfigure authenticated Git and GitHub CLI access with renewable repository credentials
  • Active chats recover when their tabs are missing, archived project chats remain accessible, and startup progress hands off more reliably
  • Unexpected Codex process exits settle active turns and release crashed provider handles so subsequent work can start a fresh process
  • Mermaid diagrams on desktop and mobile reject external-resource syntax and enforce security-sensitive rendering settings
  • The packaged zusehq CLI discovers and authenticates to a foreground Serve process, reconnects after restarts, and distinguishes connection and authentication errors
  • Desktop packages include the application license and third-party attribution notices

0.20.13

Changed

  • Cloud Workspaces now have unrestricted outbound internet access by default

Fixed

  • New production workspaces can sync repositories without failing to create `/home/repos`
  • Retry now wakes paused Cloud Workspace compute before reconnecting
  • Production and staging cloud-agent authentication are isolated so credentials cannot contaminate each other

0.20.12

Added

  • Keep your Mac awake automatically while local agents or authenticated remote clients are active, or choose Always or Off in General settings; the sidebar now also shows the active-agent count

Changed

  • Cloud Workspaces and remote access now connect through `api.zuse.sh`; this update is required because the retired `relay.stuff.md` hostname is no longer supported

Fixed

  • Resumed Cloud Workspaces no longer remain stuck authenticating because of stale credential markers, and gateway authentication now gets a fresh timeout after enrollment
  • OpenCode provider settings now select the correct installed CLI, handle OpenCode 1.18 inventory responses reliably, and show a retryable error instead of an endless loading state
  • New chats now honor repository permission defaults and stop cleanly after a denied permission request

0.20.11

Fixed

  • New-chat prompts remain visible in the transcript while Zuse prepares the workspace, without also appearing in the queue or duplicating when the persisted message arrives

0.20.10

Fixed

  • New chats no longer get stuck when attachment or generated-context finalization races the startup worker; the completed input is handed off to the durable queue and starts exactly once
  • Plain startup prompts no longer appear in both the transcript and queue, persist twice, or show a false “you interrupted” pause during workspace setup
  • Startup progress no longer lingers after the agent has begun responding

0.20.9

Fixed

  • Desktop updates now reliably open existing profiles even when startup is slow; early connection handshakes are preserved instead of leaving Zuse stuck on the loading screen.
  • Startup module failures now surface retry and reload controls instead of displaying an unbounded loading fallback.

0.20.8

Changed

  • The Zuse website now explains the agent workflow more clearly and publishes machine-readable product and API contracts for automated clients

Fixed

  • Desktop updates now open reliably instead of remaining on the startup screen. The loader now covers genuine settings readiness while the full application stays code-split for fast, budget-compliant startup

0.20.7

Added

  • Zuse Cloud can build reusable private account images from selected GitHub repositories, with repository management, build readiness and history, integrated agent authentication, and preview port forwarding
  • The mobile app now supports multi-terminal sessions, attachments and media previews, voice input, composer context and skills, Git review and conflict resolution, archives, session forks, usage visibility, and desktop handoff
  • `zuse serve` now provides stable browser URLs and short pairing codes for LAN, Tailscale Serve, and account-managed access
  • Provider settings now support custom model IDs alongside refreshed Cursor and OpenCode catalogs

Changed

  • Cloud workspaces start and resume faster through prewarmed sandboxes, image-native repositories, concurrent enrollment, and durable queued-message delivery
  • Provider and default-model settings use a clearer tabbed layout with retired built-in models removed
  • Desktop launches its embedded runtime before optional SSH, tailnet, and browser-cookie services while preserving readiness checks at first use
  • The product site and documentation search now present current workflows more clearly and link directly to matching pages and headings

Fixed

  • Cloud workspace startup, resume, SSH, one-way Mac sync, private preview forwarding, authentication refresh, and managed connector cleanup now recover predictably across disconnects and restarts
  • New-chat creation, optimistic navigation, Git state, imported chat discovery, and worktree unarchive preserve user work across retries, reconnects, and interrupted operations
  • Browser access survives authenticated reloads, works on non-secure LAN contexts, respects `--no-account`, and consistently advertises a reachable IPv4 address
  • Desktop startup waits for authoritative settings before choosing onboarding and presents a branded, recoverable, privacy-sanitized failure state

0.20.6

Fixed

  • Complete local, archived, cloud, and mobile chat histories now load automatically instead of stopping at a recent subset or depending on scroll-triggered pagination
  • New chats keep their queued prompt and workspace-creation progress visible, and explicit retries no longer collide with the original command identity
  • Consumed queued messages no longer reappear as false provider errors
  • Archiving dirty worktrees no longer advances the checked-out Git branch, and unarchive can recover from the retained archive-job snapshot
  • Switching chats restores each chat's sidebar state without an unwanted transition

0.20.5

Fixed

  • Cloud Workspace checkout now activates subscriptions reliably and automatically grants access to signed-in accounts that purchased through a checkout link
  • Cloud workspaces no longer stop during startup when Codex usage lookup times out
  • Local projects, chats, and saved WorkOS account state no longer disappear when an individual project has a Git error; the local computer remains connected
  • Add Project stays visually stable during GitHub outages, explains that GitHub is unavailable, preserves manual repository URLs, and provides scoped Retry actions
  • The notch tray now detects scaled MacBook displays and aligns with the physical camera housing

0.20.4

Changed

  • Cloud workspace settings now refresh when opened, focused, or after an action instead of continuously polling in the background

Fixed

  • Packaged desktop builds now connect to the production cloud service by default, preventing false subscription and invite-only errors caused by an unavailable staging endpoint
  • Cloud beta access remains reliable when several workspace requests start together, avoiding contradictory availability errors for an invited account

0.20.3

Fixed

  • Restored local projects and chats after upgrading when Local network access is disabled, and made project loading recoverable without deleting or replacing the local database

0.20.2

Fixed

  • Restored Zuse Cloud connectivity by routing production clients through the active Relay endpoint

0.20.1

Fixed

  • Cloud Workspace now appears in production desktop builds for invited beta users, while Relay continues enforcing private-beta access server-side

0.20.0

Added

  • Run coding agents in invite-only Zuse Cloud workspaces, with guided GitHub repository setup, encrypted credentials and transcripts, secure reconnects, pause/resume/archive controls, SSH access, and one-way local file sync
  • View Cloud usage and control overage spending under the `$40/month` plan, including `$35` of attributable E2B compute and additional provider cost plus 5%
  • Control installed desktop chats from the Zuse CLI through secure local credential discovery

Changed

  • Chats now use one durable, environment-scoped realtime state path, so agents continue after the client closes and cached transcripts appear immediately before bounded live catch-up
  • Sign-in, integration, and purchase callbacks now use polished, accessible status pages with accurate success and failure states

Fixed

  • Cloud workspaces now recover reliably across bootstrap failures, stale runtime registrations, paused chats, reconnects, and runtime upgrades
  • Cloud repository onboarding preserves successful connections when another repository fails, making retries targeted and idempotent
  • Published CLI packages now install cleanly and can authenticate to packaged desktop builds

0.19.0

Added

  • Added a machine-readable `zuse agent` CLI for automating projects, chats, sessions, models, messages, attachments, transcripts, plans, handoffs, and forks, with secure discovery of local development instances
  • Added Grok 4.6 to the model picker and updated current Grok aliases to use it while preserving explicit Grok 4.5 selection

Fixed

  • macOS now installs the newest downloaded update on quit instead of potentially staging an older cached release first

0.18.4

Fixed

  • Kept built-in MCP tools authenticated when a running chat replaces its provider session, so orchestration can continue in the same chat without re-authenticating or starting over

0.18.3

Changed

  • Performance diagnostics now use readable dithered charts with hover values and restrained motion

Fixed

  • Restored New Project and Quick Start from the desktop sidebar, while preventing in-progress folder lookups from overwriting newer paths
  • Agent permission requests now work reliably for Kiro and Grok while honoring Zuse's permission modes and policies

0.18.2

Fixed

  • Adding a project no longer creates duplicate sidebar entries, and Quick Start is available again from the Add Project dialog

0.18.1

Fixed

  • Cloud machines no longer appear in production settings until the feature is ready for release, while development builds retain access for testing

0.18.0

Added

  • Work across local, account-linked, SSH, and private-network computers from one desktop window, with persistent connections, independent reconnects, and projects grouped by computer
  • Create and manage invite-only persistent cloud computers, including checkout, lifecycle controls, secure enrollment, environment switching, and mobile discovery; live availability remains subject to account and rollout eligibility
  • Use Kiro as a first-class agent provider across desktop and mobile, including sessions, images, plan mode, model discovery, and usage limits
  • Start chats in folders that are not Git repositories; Zuse now falls back to the project directory and preserves that choice across retries and restarts

Changed

  • Queued steering is now durable across restarts and transient failures, with direct controls to steer, edit, or remove queued messages and clearer separation between background tasks and sub-agent waits
  • Usage analytics now use a more compact, interactive dashboard and keep the app responsive while scanning large local histories
  • The desktop workspace has denser, more consistent navigation, tabs, sidebars, summaries, and review surfaces
  • Community installs no longer require private icon-registry credentials, while licensed builds can opt into the full icon set

Fixed

  • Long-running ACP prompts no longer fail at an arbitrary five-minute deadline, while connection and setup operations retain bounded timeouts
  • Closing the right sidebar no longer causes it to reopen from intermediate animation resize events

0.17.1

Changed

  • Downloads now select the correct macOS or Linux installer automatically, with a dedicated `.deb` option for Debian and Ubuntu users
  • File editing and change review now share a cleaner annotation experience, including multi-line selection and gutter-based comment creation

Fixed

  • Annotation deletion now works reliably across sessions and revealed comments
  • Linux users can now start Codex and Grok without Bun, open Ghostty or the system terminal in the selected workspace, and run isolated worktree setup scripts without requiring zsh

0.17.0

Added

  • Run Zuse natively on x64 Linux with `.deb` and AppImage installers, Linux-native credential storage and browser integration, platform-aware desktop controls, and automatic Linux builds in every release
  • Use the new documentation site for end-to-end guidance on setup, providers, projects and worktrees, remote access, browser workflows, mobile use, and recovery

Changed

  • Navigate long conversations by turn while streaming responses, code blocks, and reading position remain stable during updates
  • Move the hosted app to `code.zuse.sh` and update Serve `0.1.1` to preserve its background data-directory state
  • Publish the project license and third-party attribution notices across distributed packages

Fixed

  • Restore hosted workspace connectivity and reliable thread and state discovery between desktop and Serve runtimes
  • Prevent diagnostics and telemetry capture from growing without bounds while preserving useful export data

0.16.1

Changed

  • Restore analytics event delivery (#422)

0.16.0

Changed

  • Make session streams durable across runtimes
  • Reduce desktop startup weight and defer non-critical runtime work
  • Upgrade the Effect runtime to 4.0.0-beta.102
  • Harden provider process lifecycle (#420)
  • Allow Forks from Any Message (#419)
  • Improve live synchronization and payload transport (#418)
  • Fix serve recovery lifecycle (#414)
  • Attribute renderer stall causes (#416)
  • Make chat creation lifecycle reliable (#417)
  • Add local performance and energy telemetry (#415)
  • Add end-to-end diagnostics and runtime telemetry (#378)
  • Fix hosted browser authentication flow (#413)
  • Apply hosted SPA routing in production (#412)
  • Fix hosted callback asset paths (#411)
  • Publish Serve runtime under Zuse scope (#410)
  • Prepare Serve packages for npm (#409)
  • Add one-command remote workspaces (#408)
  • Aggregate tool analytics without dropping product events (#406)
  • Surface Codex provider status failures (#405)

0.15.7

Changed

  • Fix analytics configuration across build modes

0.15.6

Changed

  • Fix integration auth and consolidate secure storage (#402)
  • Fix chat-scoped right pane state (#401)

0.15.5

Changed

  • Avoid decrypting unrelated keychain credentials (#397)
  • Unify app MCP integration and harden browser control (#399)
  • Fix queued message control flow and editing (#396)
  • Restore session-scoped interruption when the active-turn cache is cold

0.15.4

Changed

  • Fix stale reactor replay crash

0.15.3

Changed

  • Recover and cache stalled chat timelines (#392)

0.15.2

Changed

  • Add Claude Opus 5 model support

0.15.1

Changed

  • Fix macOS launch entitlement rejection

0.15.0

Changed

  • Promote Zuse to Beta and restore release checks
  • Replace target provider CLI runtime with bundled SDK (#386)
  • Scope context handoffs to the current chat (#385)
  • Fix provider inline authentication recovery (#384)
  • Safe automatic and manual naming (#383)
  • Add semantic agent activity orbs (#382)
  • Mobile: Effect Atom state, home redesign, connectivity recovery (#377)
  • Polish latest-response forking and restore desktop startup (#381)
  • Add end-to-end product analytics (#380)
  • Rebuild realtime chat and interrupt lifecycle (#379)
  • Upgrade the in-app agent browser (#376)
  • Add authenticated browser access and isolated parallel development (#375)
  • Fix assistant message forking and chat tab behavior (#374)
  • Add quarantined-fork verification: E2B passes, no egress control on the alternate
  • Make chat archiving instant and failure-safe (#373)
  • Add ADR 0033: fork identity and event-log divergence
  • Update PR-E/PR-H and Phase 1 status after tunnel+push verification (#343)
  • Add cloud storage research notes
  • Add threaded bug tracker forum
  • Add Discord community enhancement workflow
  • Add community channel setup script
  • Add reliable nearby device pairing and recovery (#370)
  • Polish renderer UI: neutral grays, glass overlays, cleaner settings (#368)
  • Add clean mobile multi-thread chats (#367)
  • Fix mobile chat scrolling and viewport boundaries (#366)
  • feat(mobile): add workspace files and change review
  • Polish mobile connections and native chat UI (#364)
  • fix: simplify paired phone access
  • chore: update iOS dependency checksums
  • fix: unify mobile connection experience
  • fix: construct encodable pairing responses
  • feat: add secure cross-device network access
  • Make renderer creation and streaming immediately responsive (#361)
  • feat: add full changes review and inline conflict resolution (#362)
  • Add native MCP discovery and authentication (#360)
  • Fix terminal input ordering and recovery (#359)
  • Modernize native ACP session interactions (#358)
  • Publish cloud platform roadmap (#357)
  • Configure agent workflow guidance (#356)
  • Rework mobile chat composer, model sheet, and turn display (#352)
  • Surface plans and subagents in environment summary (#349)
  • Finish iPhone review experience and relay reliability (#350)
  • Fix image previews in the file viewer (#348)
  • Add Linear-powered issue sessions (#347)
  • Refresh short-lived auth tokens before expiry (#346)

0.14.0

Changed

  • Fix New Chat from usage and archive views (#344)
  • Restore and preview archived chats safely (#335)
  • Fix realtime orchestration updates (#333)
  • Start agents independently of workspace setup (#334)
  • Use native plan modes without permission churn (#332)

0.13.0

Changed

  • Refine plan handoff sessions (#331)
  • Fix new agent startup loader race (#329)
  • Improve tool activity and subagent inspection (#325)
  • Improve usage limits and reporting (#328)
  • Add fullscreen environment summary (#327)
  • Prevent desktop relay port collisions (#326)
  • Build production-shaped test suite (#324)
  • Complete provider runtime and durable migration (#323)
  • Complete durable runtime ownership cutovers (#322)
  • Move Git/worktree into packages and harden durable domain dispatch (#321)
  • Build the Effect 4 backend foundation and CQRS core (#320)
  • Remove orchestration prefixes from provider prompts (#319)

0.12.6

Changed

  • Add production crash recovery tools (#317)
  • Quiet live tool-call rows in the chat stream (#316)
  • better animations (#315)
  • Constrain active chat content rail (#314)
  • Agents notes (#313)

0.12.5

Added

  • Add GPT-5.6 model support with high and extra-high reasoning effort options.

Changed

  • Harden local development startup and Electron reload behavior.

Fixed

  • Fix image and context attachments failing validation when starting a new chat.

0.12.4

Changed

  • [codex] Fix landing composer attachments (#309)
  • Mobile new-chat: docked selectors, real provider logos, menu polish (#308)
  • Fix chat scroll anchoring (#307)

0.12.3

Changed

  • Fix merge action render loop
  • Fix Jump to latest threshold and chat scroll lifecycle (#304)
  • Fix permission card mislabeling plan-mode prompts as sensitive paths (#302)

0.12.2

Changed

  • Stabilize chat transcript ingestion

0.12.1

Changed

  • Fix skipped chat lineage migration

0.12.0

Added

  • Self-orchestrating agents: Phase 1 control plane + spec (#250)
  • [codex] Add shared HTTP MCP gateway (#292)
  • Add Grok 4.5 model picker support (#294)

Changed

  • Mobile UI overhaul: naming, new chat, session, stream, permission, inbox (#295)
  • [codex] Remove manual sub-agent settings (#297)
  • [codex] Improve model picker defaults (#299)

Fixed

  • [codex] Fix Grok native permission handling (#291)
  • [codex] Fix WorkOS auth persistence (#296)
  • [codex] Fix auth client startup retry (#298)

0.11.0

Added

  • [codex] Add browser visual annotations (#277)
  • [codex] Add remote mobile push notifications (#272)
  • [codex] Add advertised endpoint model (#270)
  • Add managed relay tunnel support (#266)
  • Mobile: interactive chat — question cards, permission approvals, offline outbox, markdown (#265)
  • Add OpenCode provider management: connect providers, custom endpoints, visibility (#260)
  • Account-based laptop → phone connection (relay + WorkOS + DPoP) (#262)
  • [codex] add zuse repository settings and bundled skill (#258)
  • [codex] Implement remote multi-client foundations (#259)
  • [codex] Add create-from source picker (#257)
  • [codex] add macbook notch notification tray (#249)
  • Auto-update: background download, restart toast, quit guard (#256)

Changed

  • Refine mobile composer controls (#285)
  • [codex] Polish mobile chat UI (#282)
  • [codex] Polish PR checks and feedback UI (#284)
  • [codex] Redesign mobile UX (#280)
  • Harden mobile connection runtime (#273)
  • [codex] Update mobile app identity (#274)
  • Improve chat timeline scrolling (#269)
  • [codex] Align chat footer controls (#267)
  • iOS native polish: glass surfaces, animated presence dots, haptics (#264)
  • Mobile: Expo 54→57 upgrade + iOS-native design pass (@expo/ui) (#263)
  • [codex] Store editable settings in JSON (#248)
  • Improve chat auto-naming with real-time sidebar updates (#247)

Fixed

  • Fix mobile relay and queued sends (#287)
  • Fix live chat sync (#286)
  • Fix mobile relay DPoP auth (#279)
  • [codex] Fix provider update state bleed (#278)
  • [codex] fix WorkOS refresh token persistence (#275)
  • Fix chat timeline live scrolling (#271)
  • [codex] Fix project accordion toggle (#268)
  • [codex] Fix chat autoscroll performance (#261)

0.10.3

Changed

  • Finish WorkOS sign-in on a proper "Signed in — you can close this tab" page instead of leaving the browser hanging on a dead `zuse://` URL, and drop the OS "Open in Zuse Alpha?" prompt. Packaged builds now use the localhost loopback redirect (like dev); the `zuse://` scheme handler stays registered as a fallback.

0.10.2

Fixed

  • Actually inline the public WorkOS client id into release builds: Turborepo's strict env mode was stripping `WORKOS_CLIENT_ID` before `tsdown` ran, so packaged builds shipped an empty id and sign-in reported "WorkOS is not configured". Declared the var in `turbo.json` so it reaches the build. Supersedes 0.10.1, which still shipped empty.

0.10.1

Fixed

  • Supply the public WorkOS client id at release build time so sign-in works in packaged builds instead of surfacing "WorkOS is not configured".

Changed

  • Fork chat + plan/context handoff (#252)
  • Route pasted text & dropped files into .context/files (#246)

0.10.0

Changed

  • Fix flickering plan-approval banner (#244)
  • Fix mermaid error bomb bar + jittery send animation (#243)
  • [codex] add provider contract test fixtures (#242)
  • [codex] Improve bug report diagnostics flow (#241)
  • [codex] Disable runtime code indexing (#240)
  • Add LAN auth pairing for WS server (#238)
  • [codex] add renderer websocket rpc client (#239)
  • [codex] continue external agent threads (#237)
  • [codex] add agent browser v2 (#236)
  • [codex] Add Expo mobile read-only client (#235)
  • [codex] Add renderer toast notifications (#234)
  • [codex] Add markdown and HTML preview tab (#233)
  • [codex] add event-sourced persistence and cursor streaming (#232)
  • Remote/multi-client foundation: wire contract + WS transport + spec (#218)
  • [codex] add light and system appearance support (#229)

0.9.0

Changed

  • [codex] Fix dirty worktree removal feedback (#222)
  • [codex] Remove competitor mentions (#227)
  • [codex] Show approve bar for emulated plan mode (#226)
  • Clean up stale memoize branding (#225)
  • [codex] fix codex context status accounting (#224)
  • [codex] Fix stale wire package imports (#223)
  • [codex] Polish streaming chat motion (#221)
  • feat(auth): WorkOS AuthKit login (PKCE, keychain, optional) (#219)
  • [codex] Add Claude Fable 5 support (#220)
  • Add diagnostics bundle export (#206)
  • [codex] Refine renderer color palette (#216)
  • [codex] Float chat scroll controls (#217)
  • [codex] clean model picker (#215)
  • Fix messages not appearing until chat re-open (hydrate race) (#210)

0.8.3

Fixed

  • Zuse data migration now checks the actual project count before deciding whether the new `Zuse Alpha` database is empty. This recovers users who already launched Zuse once and have a migrated schema with no projects.

0.8.2

Fixed

  • Zuse now migrates data from legacy sibling Application Support folders such as `memoize Alpha` and `memoize` when the new `Zuse Alpha` database is still empty. The empty Zuse database is backed up before the legacy database is copied forward.

0.8.1

Fixed

  • Restored the macOS bundle identifier to `app.memoize.desktop` so existing memoize Alpha installs can accept Zuse Alpha updates in place through Squirrel.Mac. The app name and GitHub release feed stay Zuse, but the updater identity remains stable for compatibility.
  • Legacy memoize keychain credentials are now promoted into the Zuse keychain namespace after first successful fallback read.

0.8.0

Added

  • Live file tree updates now track disk changes and support create/delete flows with confirmation dialogs. (#204)
  • New worktrees can auto-symlink nested environment files for monorepos and Cloudflare projects. (#201)

Changed

  • memoize Alpha is now Zuse Alpha. The app now uses the Zuse bundle identifier (`app.zuse.desktop`), GitHub release feed, package names, worktree paths, protocol links, keychain service, and SQLite paths. Existing data and legacy `memoize://` links remain readable where possible, but this is a full technical identity move to Zuse rather than an updater-compatible in-place rename. (#207)
  • Removed remaining legacy source references from user-facing copy and project metadata. (#198)
  • Loading states now use animated gradient shimmer polish. (#200)

Fixed

  • Force-archiving can remove a chat even when its worktree is dirty. (#197)
  • Plan feedback routing now reaches the correct agent turn. (#205)
  • Claude interruptions now render as an interrupted badge instead of a hard error. (#202)

0.7.1

Changed

  • [codex] Fix Claude result error classification (#195)
  • [codex] Fix website changelog publishing (#194)
  • [codex] Optimize Pokédex page (#193)
  • Terminal: fix pane overflow, GPU rendering, thin cursor (#192)
  • Add app-wide motion system to the renderer (#188)
  • Keyboard navigation: tabs, chats, panels, panes + Cmd+K chat switcher (#191)
  • Isolate terminals & dock tabs per chat, keep shells running across switches (#190)
  • Cap turn-summary file chips with collapsible +N more toggle (#189)
  • Render sub-agent summary as markdown (#187)
  • Move plan Approve/Cancel into a pinned bar above the composer (#186)

0.7.0

Changed

  • Surface supervised-mode permission prompts in sidebar and tabs (#184)
  • Render inline chat Edit diffs with @pierre/diffs library (#183)
  • Auto-scroll on send and cap tool box height (#182)
  • Fix false "Requires Claude Pro" gate for paid Claude logins (#179)
  • Add goal mode support for the Grok provider (#181)
  • Surface Claude auth failures as an in-app "Sign in to Claude" card (#180)
  • Compact composer trays into a unified pill stack (#178)
  • Cap collapsed tool row width (#176)
  • Unify composer + bubble pill styling (#175)
  • Auto-publish releases instead of drafts (#174)

0.6.1

Changed

  • [codex] Fix queue resume after stop (#172)
  • Base new worktrees on origin's default branch, not stale local HEAD (#171)
  • Persist composer drafts (#168)
  • Dock-style hover-reveal for the left sidebar (#170)

0.6.0

Changed

  • Add tokenmaxer onboarding and usage fixes (#166)
  • Add multi-source token usage dashboard (#164)
  • Drive the agent browser with real input + a rendered cursor (#165)
  • [codex] Show active task in project plan header (#160)
  • Make release skill available to Claude and Codex (#163)

0.5.0

Added

  • Worktree setup now streams live progress in the app, with a dedicated setup card and the Run action moved into the top bar for faster project startup. (#159)
  • The right sidebar can be customized as a panel dock, making terminal, browser, files, and supporting tools easier to arrange per workflow. (#156)
  • Codex goal mode is supported in chat sessions, giving agents a persistent objective and visible goal state during longer work. (#151)
  • Context window and usage-limit status popovers expose model usage and limit state without digging through raw provider output. (#154)
  • The website now has a direct download route for the latest signed macOS build. (#150)
  • Codex feature controls are gated by CLI capability, with fast mode surfaced only when the installed CLI can support it. (#158)

Changed

  • Worktree creation is faster, Pokemon chips are cleaner, and rare unlocks now appear as toasts instead of taking over the chip UI. (#157)
  • Code annotation composition and navigation are more polished, including clearer tray behavior and source reveal handling. (#153)
  • Loading states now use a simpler solid spinner treatment instead of the previous dotted loader set. (#155)

Fixed

  • Claude sessions now initialize with the correct worktree current working directory, so prompts run in the intended workspace. (#161)
  • Project Plan tray parsing supports newer TaskCreate and TaskUpdate tool event shapes. (#152)

0.4.0

Added

  • Worktree setup scripts can now run per project/worktree, giving agents a first-class way to prepare dependencies and local environment before starting work. (#126)
  • Mermaid diagrams render directly in markdown responses. (#128)
  • Chat titles and worktree branches can be generated from the first user message, making new agent runs easier to scan and easier to identify in git. (#129)
  • GPT-5.5 Codex is available in the Codex model picker. (#130)
  • Chat rows now include state icons for faster scanning across idle, running, and attention-needed sessions. (#132)
  • Agent completion sounds and deeper permission diagnostics make long-running work and blocked permission flows easier to notice and debug. (#133)
  • Agent message queue persistence keeps queued follow-up messages across renderer/server restarts and improves queue handling for multi-message agent workflows. (#136)
  • Chats now track read/unread state, with Next unread navigation for moving through updated sessions quickly. (#137)
  • Pokémon worktree Pokédex gives the new Pokémon-named worktree system a dedicated browsing surface. (#140)
  • Code annotations composer adds a richer composer path for referencing and annotating source code while prompting agents. (#141)
  • Public Memoize landing site. (#142)

Changed

  • Grok auth noise is hidden more aggressively and agent activity is grouped for a cleaner timeline. (#127)
  • Claude Ultracode UI is refined so the new model/provider controls fit the rest of the provider experience. (#131)
  • Loaders were standardized around a smoother circle/comet treatment. (#135)
  • Renderer iconography moved from Lucide to Hugeicons Pro, with real provider logos replacing generic marks. (#138)
  • Changes tab cleanup improves file selection, revert flows, conflict handling, and sidebar diff stats. (#139)
  • Renderer surfaces were cleaned up across the app for a tighter, more consistent desktop UI. (#143)
  • Renderer icons were polished after the Hugeicons migration. (#144)
  • Settings UI was cleaned up for a clearer, denser configuration experience. (#145)

Fixed

  • Permission prompts are now delivered reliably mid-turn, preventing stuck or missed approval flows while an agent is running. (#134)

0.3.3

Added

  • Claude provider updates: Opus 4.8 and Ultracode model options, plus plan mode now always routes edits through prompts. (#111)
  • ACP agents (Grok, Gemini, Cursor) can execute real terminal/output commands instead of rendering terminal requests as inert tool calls. (#112)
  • In-app agent browser control drives the existing Electron webview, so agents can navigate and inspect pages without opening a separate browser surface. (#117)
  • Top bar can now show live CI state and offers direct merge / auto-merge actions. (#113)
  • Provider cards surface available CLI updates for supported providers. (#114)
  • Claude fast mode toggle for faster lower-latency Claude sessions. (#119)
  • Archive cleanup scripts and related repository cleanup controls. (#120)
  • Repository branch toolbar for faster branch/context switching. (#124)

Changed

  • Markdown rendering is more polished and consistent in chat output. (#121)
  • Grok access detection now accepts X Premium+ / SuperGrok entitlements. (#122)

Fixed

  • Grok sessions no longer abort mid-turn when the ACP child surfaces transient `AuthorizationRequired` noise inside `session/update` error frames while the turn is still completing normally. The shared ACP translator now filters that frame on the grok channel so in-flight prompts aren't rejected and the session doesn't flip to idle prematurely.
  • New chats run inside their selected worktree and create branches from a fresh `origin` base. (#115)
  • Codex tool translation handles the current tool event shape correctly. (#123)

0.3.2

Added

  • Three-way "add project" menu (Open project / Open GitHub project / Quick start) with clone and create-project dialogs — templates Empty / Next.js / Turborepo and an optional private GitHub repo on create (gh-authed). (#104)
  • Project Plan tray docked above the composer: surfaces the agent's TodoWrite task list as a collapsible panel with an "X of Y Done" count and per-item status icons, reading the list from either the Claude (`tool_use` input) or Grok (`tool_result` output) shape. (#107)

Changed

  • Git-not-a-repo handling: a new `git.init` RPC and a shared "Initialize Git repository" CTA replace the raw error payload across the Changes, PR, and Diff tabs; the failure is classified inside the Effect (typed `GitNotARepoError`) so the CTA fires reliably, and the Diff view re-fetches immediately after an in-place init. (#104, #105)
  • A lone terminal now spans the full pane width; the terminal-list sidebar appears only once there are 2+ shells, with a floating hover-revealed `+` to add more. (#104)
  • Grok native tool results (`list_dir` / `grep` / `read` / `edit`) now render as clean rows — directory tree, grouped grep matches, file contents, and real diffs — instead of raw JSON envelopes or byte-array char codes. (#106)

Fixed

  • Auto-update on macOS was stranded: `electron-updater` (Squirrel.Mac) needs a ZIP of the `.app`, but releases only shipped a DMG. Each release now ships a `zip/universal` target alongside the DMG, so auto-update works from 0.3.2 onward. (#108)
  • External (http/https) links now open in the system browser instead of hijacking the app window or spawning an in-app Chromium window; the Vite dev origin is whitelisted so HMR is unaffected. (#108)
  • Create-project dialog no longer crashes — the base-ui Checkbox hook error is gone, replaced with a native checkbox. (#105)
  • Files outside the project folder can be opened, edited, and saved via dedicated external-file RPCs, with clickable out-of-workspace file chips. (#105)

0.3.1

Added

  • Multi-terminal sub-sidebar in the right pane: the Terminal tab now lists every terminal for the workspace with a `+` to spawn more, click-to-switch, and hover-X to close. All instances stay mounted so xterm scrollback and PTY connections survive switches, and closing the last terminal re-seeds a fresh one. (#95)
  • In-app Browser tab driven by an Electron `<webview>` with back/forward/refresh and a URL bar, sandboxed in its own process. Bare hosts default to `https://`, except `localhost`/`127.0.0.1` which default to `http://` for dev servers. (#95)
  • Standalone MCP server now wires up the full hybrid `code_search` pipeline (symbol + BM25 + vector + RRF + rerank) instead of the symbol-only stub, shared with `IndexService` via a single `search()` module. `index_status` reports populated blob/chunk/symbol/ref counts, and a new `reindex` tool exposes a full pass to agents. (#97)
  • ACP file-system handlers for `create_directory`, `delete_file`, and `move_file`, plus method aliases (`writeTextFile`, `mkdir`, `unlink`, `rename`, …) and flexible write payloads (`dataBase64` / `content` / `text` / `data`). (#98)

Changed

  • Creating a new chat session no longer freezes the UI for ~60s. The `+` on the tab strip now opens an instant tab backed by a loading panel while the provider CLI boots on a background daemon; sessions start in a `booting` state and flip to `idle`/`running` (or `error`) once the handshake completes. (#99)
  • Single source of truth for sensitive-path detection and FS-operation policy (read / write / create / delete / move), honoring runtime and permission modes, with every ACP mutation routed through it. (#98)

Fixed

  • Grok agent reliability: a 4s startup grace window swallows transient `Auth(AuthorizationRequired)` stderr during cached-token refresh so the first message no longer shows a red error card; the worker now transparently respawns on death instead of asking you to close the chat; and MCP-style tool output is flattened so `read_file` results render as code instead of raw JSON. (#101)
  • Cursor driver: `cursor-agent` is prewarmed at boot (time-to-first-token 18s → 5.8s), the model picker uses ACP-valid slugs with aliases for old persisted settings, `session/load` resumes sessions (falling back to `session/new`), and tool-call frames are logged to `~/.cache/memoize/cursor.log` with arguments and tool names preserved across updates. (#96)
  • UX cluster: external links now open in the system browser instead of inside the app, switching a chat's worktree restarts member sessions in the new cwd, out-of-workspace file chips are flagged non-clickable with a tooltip, image attachments open inline in a tab, and Cmd+W closes the active file tab before falling through to archiving the chat tab. (#102)
  • Auto-acknowledge `ask_user_question` and `_x.ai` / `_google` namespaced ACP methods in the grok, gemini, and cursor drivers so interactive prompts no longer hang the agent turn. (#98)

0.3.0

Changed

  • **App renamed to "memoize Alpha"** to signal that this build is pre-1.0 and may contain bugs. The bundle identifier (`app.memoize.desktop`) is unchanged, so existing installs auto-update to the renamed app in place. Dock title, About panel, and macOS app menu now read "memoize Alpha"; the in-app brand and CLI / URL scheme stay as `memoize`.

Added

  • Full-pane diff view in the file viewer with a Diff / Edit toggle, so reviewing a tool's edits no longer requires scrolling between two side-by-side columns. (#93)
  • Worktree UX overhaul: new worktrees are created outside the repo root (no more accidental nesting in `git status`), get Pokémon-themed names instead of UUIDs, and the new-chat panel opens instantly instead of waiting for the worktree to materialize. (#92)
  • Local code index (MVP 0.04) — phases A–F land together with auto-reindex on file change, giving the agent a fast structural view of the repo without re-walking the tree on every query. (#86)

Changed

  • Renderer now has a single source of truth for the active directory and branch, replacing the previous fan-out of duplicated state across panels. (#91)

Fixed

  • Grok agent reliability on local login — the driver now uses the cached OAuth token instead of re-prompting on every session start. (#78)
  • Cursor driver: ACP now fails fast on auth errors instead of silently retrying, OAuth flow is wired end-to-end, the model list is refreshed on each session, and provider errors surface in the UI instead of being swallowed. (#90)
  • Settings writes occasionally raised `ENOENT` mid-rename when two writes raced. Writes through the config store are now serialized. (#89)
  • Provider boot crashes: codex no longer crashes when spawned without a TTY, missing cursor binaries surface a clear error, and claude/opencode gate correctly on availability. (#88)
  • Onboarding provider step tightened — copy now makes it clear that you pick a provider and go; no extra setup required. (#87)

0.2.1

Added

  • "Check for Updates…" menu item that reflects all 7 `electron-updater` states (idle / checking / available / downloading / ready / error / not-available), giving users a way back into the update flow after dismissing the toast. Sits in the macOS app menu and the top of Help on Windows/Linux. About panel gets version + copyright; Help menu gains "View Changelog" and "Report an Issue"; DevTools / Force Reload move into a `Developer ▸` submenu that only appears in dev builds. (#84)
  • One-click Cursor sign-in. New `agent.startLogin` streaming RPC spawns `cursor-agent login`, extracts the OAuth URL, and emits `LoginEvent`s; the renderer card replaces the old copy-and-run flow with a button that opens the URL via `shell.openExternal`, shows progress, and refreshes availability on success. (#83)

Fixed

  • Auto-update downloads that stalled mid-way were silent — `electron-updater` fires no "stuck" event. Added a 60s download-stall watchdog with one-shot auto-retry that then surfaces a retryable `error` state; the update banner now renders the `error` state with a "Try again" button and un-dismisses itself when status flips to error. (#84)
  • Cursor authentication detection was trusting the existence of `~/.local/share/cursor-agent/` as proof of login, but that directory is created on install and just holds the CLI bundle — so every fresh install was flagged as signed in. Now probes `cursor-agent status` and parses the output. The blanket "Requires Cursor Pro" badge was dropped since the CLI has no whoami; the ACP server enforces the real plan check at session start. ACP auth waterfall in the cursor driver now throws a clear "not signed in" error instead of silently retrying `cursor_login` and timing out. (#83)
  • Folder picker hid every dotfile directory (`~/.claude`, `~/.config`, `~/.ssh`, …) on macOS because the Electron open dialog was missing `showHiddenFiles`, making any folder under a hidden parent unreachable. The picker also now defaults to the user's home directory instead of the process cwd, so it opens somewhere useful on first launch. (#82)
  • Broken `github.com/forkzero/memoize` repository URL in the native menu. (#84)

0.2.0

Added

  • xAI Grok provider via the Agent Client Protocol (ACP). Picker exposes Grok models alongside Claude/Codex; sessions stream through the shared ACP transport with the same permission/tool plumbing as the other ACP providers. (#64)
  • Gemini CLI provider. Adds Google's `gemini` CLI as a first-class driver; ACP v2 response types and tool-call normalization land in the same pass so tool results render correctly in the timeline. (#67)
  • Cursor Agent provider via ACP. (#69)
  • opencode provider with dynamic model inventory + variants. Models are fetched at runtime from the opencode catalog instead of being hardcoded, and the picker surfaces per-model variants. (#75)
  • Canonical tool translator for opencode. Provider-specific tool shapes are mapped to memoize's canonical schema, `ToolUse` events are deduplicated, and stale user-echo messages are dropped from the stream so the timeline matches what other providers produce. (#77)
  • User-editable keybindings backed by an on-disk config store. Settings → Keyboard shortcuts now writes through to a JSON config file; rebinds persist across launches and survive app upgrades. (#71)
  • Unified ACP translator + per-model capabilities + reliable interrupt. All ACP-based providers (Grok, Gemini, Cursor, opencode) share a single translator that normalizes streamed events into canonical timeline items; per-model capability metadata gates features like images/tools at the picker; interrupt now reliably halts in-flight ACP turns instead of leaving zombie streams. (#72)
  • Rich model picker: search, recents, provider chips, collapsible accordion sections, and stable `Cmd+1`–`Cmd+9` shortcuts that always map to the same top-pinned slots regardless of filter state. (#80)
  • Loading affordances during chat create + per-tab streaming. Creating a new chat now shows immediate feedback while the session boots, and streaming state is tracked per-tab so background tabs keep streaming while the foreground tab is interactive. (#66)

Changed

  • Settings redesigned with a minimal frame and a lime accent. Rows are tighter, section headers are quieter, and the new primary color flows through buttons, focus rings, and toggle states. (#73)
  • Top bar gains glass workflow buttons and inline "Fix" actions when CI is failing — the buttons read the latest run status and offer a one-click flow to push a fix branch. (#74)
  • README rewritten end-to-end as a full memoize project overview (what it is, providers, install, contributing). (#76)
  • UI polish pass: empty-state model picker matches the populated state, and Read/Edit tool result visuals now render diffs and file context in line with the rest of the timeline. (#79)
  • Provider diffs cleaned up in the renderer so per-provider streams normalize into the shared timeline without provider-specific branches in UI code. (#68)

Fixed

  • Sessions with NULL `chat_id` rows (left over from the 0.1.4 chats migration on some installs) are healed on startup and the column is now `NOT NULL` at the schema level, so the nested-tab UX can't fall back into a broken state. (#70)

0.1.4

Added

  • Native macOS menu bar with keyboard shortcuts: new chat (⌘N), open project (⌘O), settings (⌘,), toggle sidebars (⌘B / ⌘⌥B), toggle terminal (⌘J), focus composer (⌘L). Bindings are listed in Settings → Keyboard shortcuts (single source of truth in `lib/shortcuts.ts`) and surfaced inline on the relevant button tooltips. (#59)
  • In-app update toast. Drives `electron-updater` manually instead of `checkForUpdatesAndNotify`; the bottom-right toast offers Later / Install on quit / Update now, downloads only after the user picks, and auto-installs once the download lands. Lifecycle events flow through a new `window.zuse.updates` bridge and shared `UpdateStatus` in `@zuse/contracts`. (#61)
  • Cross-provider switching on fresh chats. `ModelPicker` lets you pick a model from the other provider as long as the chat has no user message yet; a new `session.setProvider` RPC mirrors `setWorktree`'s fresh-session gate. The teardown path was split so `setModel` / `setProvider` / `resumeSession` only interrupt the provider event-pump fiber, keeping the renderer's `messages.stream` and `session.streamStatus` subscriptions alive across the swap. (#60)
  • Codex app-server slash commands. (#62)
  • Nested-tab chat UX. Sidebar rows become "chats" (a new container table); the tab strip in the main pane shows that chat's sessions as peer tabs, "+" adds a session to the active chat, and ⌘W closes the active tab via Electron menu → IPC and archives the session (auto-spawning a fresh one if it was the last). Migration 0011 backfills one chat per existing top-level session and rehomes v3 children. Adds `forked_from_session_id` / `forked_from_message_id` columns for a future fork-from-message feature. (#63)
  • Codex session resume. The driver captures the codex thread id from `thread.started` and persists it as the session's resume cursor; `Codex.resumeThread(id, opts)` reattaches on next start. Codex doesn't replay prior items on resume — the renderer's persisted timeline remains the source of truth for what came before. Wire schema gained a `"codex-thread-id"` resume strategy alongside the existing `"claude-session-id"`. (#57)
  • Codex image attachments. Image refs (`png`, `jpeg`, `gif`, `webp`) attached to a turn are forwarded to `runStreamed` as `local_image` items pointing at the on-disk blob; non-image refs are dropped with a warn. `AttachmentService` gained a `readPath` method so the driver can hand the SDK a file path instead of re-encoding bytes. (#57)
  • Codex plan mode. The chat-header chip flipped the wire but the codex driver was hardcoded to read-only — now `plan` → codex `sandboxMode: "read-only"` and `default` / `acceptEdits` → `workspace-write`. Live toggle is implemented as `codex.resumeThread(currentId, newOptions)` since the SDK has no live sandbox-update API; the rebuild is chained onto the per-thread send queue so a toggle mid-turn doesn't race an in-flight `runStreamed`. (#57)
  • Codex CLI upgrade banner. Provider availability probe now reports `cliVersionStatus` ("ok" | "outdated" | "unknown") plus a per-provider upgrade command; an inline banner above the composer prompts the user to upgrade when the installed codex CLI is below the SDK's pinned floor (currently 0.128.0). (#57)

Changed

  • Cleaner alert surfaces across `Alert`, `ErrorBubble`, `ToolErrorRow`, `CliUpgradeBanner`, `FileEditor` conflict banner, `TerminalBlock` / `PreBlock` errors, and `ErrorPill`. New dedicated tokens (`--alert-error-bg`, `--alert-warning-bg`, `--alert-info-bg`, `--alert-success-bg`) replace the loud red/yellow/amber borders + washes with soft warm-tinted card surfaces. (#58)
  • Tooltip popups restyled with a frosted-glass look (translucent fill + backdrop blur). (#59)

Fixed

  • Codex CLI 0.130+ rejected `gpt-5-codex` (and bare `gpt-5`) for ChatGPT-account users; sessions died at start with a 400. Picker now uses current codex model names (`gpt-5.4` default, `gpt-5.4-mini`, `gpt-5.3-codex`, `gpt-5.3-codex-spark`) and `resolveModelSlug` aliases stale slugs through to `gpt-5.4` at both renderer load and codex driver boundaries, so an in-flight resume can't punch the bad slug through. (#58)
  • Codex turn end no longer left the renderer composer stuck in "loading". `turn.completed` / `turn.failed` and the `runTurn` catch now emit `Status: idle`. (#57)
  • Codex sessions on older `codex` CLIs failed with "Codex Exec exited with code 2: error: unexpected argument '--experimental-json' found". codex-sdk@0.128 hard-codes that flag; pre-0.128 binaries reject it. The server now probes `codex --version` before starting and the renderer's `CliUpgradeBanner` surfaces a friendly upgrade card; if the user sends anyway, the SDK trace is intercepted and replaced with a single-sentence chat error. (#57)

Known limitations (Codex SDK 0.128)

  • No interactive permission prompts on Codex. The SDK exposes `approvalPolicy` as static config but no JS callback to bridge approvals into memoize's toast, so codex sessions stay on `approvalPolicy: "never"` regardless of mode. Plan-mode (read-only) is the only user-facing lever; default/acceptEdits both run with full workspace-write and no prompts.
  • No cross-provider sub-agents on Codex. `input.agents` is still ignored — Codex SDK has no `mcpServers` config, so the cross-provider bridge sketched in `specs/sub-agents/decisions/0012-codex-bridge-via-mcp.md` lands as a follow-up PR.

0.1.2

Fixed

  • Packaged macOS app failed to start Codex sessions with "Unable to locate Codex CLI binaries. Ensure @openai/codex is installed with optional dependencies." Same shape as the 0.1.1 Claude fix: we don't ship the SDK's bundled native CLI, so the SDK now receives `codexPathOverride` pointing at the user's installed `codex` binary (`which codex`, with the same `fix-path`-expanded PATH). Surfaces a clean "Codex CLI not found on PATH" message when the binary genuinely isn't installed.

0.1.1

Fixed

  • Packaged macOS app could not start new Claude sessions ("Native CLI binary for darwin-arm64 not found"). GUI-launched apps inherit a minimal PATH, so `which claude` never found the user's installed Claude Code binary and the SDK fell back to a bundled native CLI we don't ship. The main process now expands PATH from the user's login shell (via `fix-path`) before the runtime boots, and the server fails with a clear "Claude Code CLI not found on PATH" message when the binary genuinely isn't installed.

0.1.0

Added

  • First public macOS build: signed + notarized universal `.dmg` (Apple Silicon + Intel) distributed via GitHub Releases.
  • In-app auto-update via `electron-updater` against the GitHub Releases feed.
  • Tag-driven CI release workflow (`v*` tags publish a draft release with the `.dmg`, `latest-mac.yml`, and blockmap).

Changed

  • Locked the macOS app to the dark appearance variant so vibrancy no longer follows the user's system theme — fixes the "faded UI on a light-mode Mac" look.
  • Rebranded from `forkzero` to `memoize` (app name, custom protocol scheme, package names).